# Production settings for docker-compose.yml — copy to .env and change every secret.
# Generate secrets with: node -e "console.log(require('crypto').randomBytes(48).toString('base64url'))"

# domains (TLS is terminated in front of the gateway: host nginx, Traefik or the CDN)
SITE_DOMAIN=imenpishgaman.ir
ADMIN_DOMAIN=admin.imenpishgaman.ir
# host port of the gateway container
HTTP_PORT=8080
# reverse proxies in front of the API: gateway (1) + host TLS proxy (1)
TRUST_PROXY=2
# set to false only if the admin is served over plain http
COOKIE_SECURE=true

# database
POSTGRES_USER=imen
POSTGRES_PASSWORD=change-me
POSTGRES_DB=imen

# object storage (MinIO container); bucket is created automatically
S3_BUCKET=imen-media
S3_ACCESS_KEY=imen
S3_SECRET_KEY=change-me-at-least-8-chars

# auth + cache purge secrets
JWT_SECRET=change-me-48-random-bytes
REVALIDATE_SECRET=change-me-too

# first admin user (created by: docker compose exec api node dist/seed/seed.js)
ADMIN_PHONE=09120000000
ADMIN_PASSWORD=change-me
ADMIN_NAME=مدیر سایت

# npm registry used while building the images (set a mirror if npmjs.org is slow or blocked)
NPM_REGISTRY=https://registry.npmjs.org/